Presumably their ongoing access was revoked, so they’d only have access to past information from when they were still employed, and if they wanted to be malicio

Presumably their ongoing access was revoked, so they’d only have access to past information from when they were still employed, and if they wanted to be malicious they would’ve made a copy then. The only risk I can see is loss/theft of the machine but I wouldn’t call it a massive issue assuming ongoing access was indeed revoked.